@rrthokala wrote: appended the cert information to cacert.pem in python lib to make it work. where is this python lib located? ... View more

Unistall App punchcard_app ... View more

I am also facing same issue. and got response from curl command.How can i check my firewall(s) if that is not blocking?  ... View more

hi rakesh_498115, could you try delete splunkd.pif file and start splunk again? its under "$SPLUNK_HOME/var/run/splunk/" export SPLUNK_HOME="/opt/splunk" rm $SPLUNK_HOME/var/run/splunk/splunkd.pid $SPLUNK_HOME/bin/splunk status $SPLUNK_HOME/bin/splunk start another option is check splunk user has right to splunk home. chown -R splunk:splunk /opt/splunk/ And start splunk with "splunk" user. if problem stills exists could you share content of install_nix_forwarder.sh file ? ... View more

This will help a bunch: http://bit.ly/Splunk_Azure_Permissions ... View more

Did you get this working? I am working on this myself right now. Only want the utm logs but on top of this only specific fields within those logs. UTM gets very sizable in our environment and we have a constraining license. ... View more

hi, did you check this page ? https://www.splunk.com/en_us/about-splunk/contact-us.html ... View more

hi @cegar, were you able to solve your problem? If so, will you let us know how you did it? That way, future users could learn from this post. Thanks! ... View more

hello @aaron_oreilly, did you check this section ? http://docs.splunk.com/Documentation/AddOns/released/Nessus/Troubleshoot ... View more

if you buy additional license it makes 1250gb/day . if you want to upgrade to 750gb it makes 1250gb/day . You can split it by index etc, check this url for more detail. http://docs.splunk.com/Documentation/Splunk/7.0.3/Admin/Groups,stacks,pools,andotherterminology ... View more

Hi @kevinjb, you have 3 option for logging. i prefer do it with web gateway logging . 1. web gateway log . (create policy on web gateway based on your filetype actions and send related logs via syslog or splunk app.) 2. access log for file servers . (you have use another 3rd party software for fileserver audit . you can alert for create file action but you need to filter events like created via internet browsers.) 3. windows events . (you can use sysmon for endpoint log collection. check Event ID 11: FileCreate for sysmon.) ... View more

Thanks for the help. ... View more

thank you. ... View more

Hi Rick, It worked now. Looks like my app might got corrupted. I'm not sure. When I tried by downloading again the same app in a fresh and it works. Anyway thanks for your time. I appreciate it. ... View more